The Covenant
The stewardship commitments that bind the standard’s author and steward, held not as marketing copy but as ledgered, auditable facts — the same way the standard proves its tenants’ work. Made deliberately while the platform is small (covenanted 2026-07-14, the day after the first ALIVE verdict, at one brand of eight) and locked so they survive the day they become expensive. A commitment that only holds while it costs nothing is not a commitment; it is a forecast.
C1 · The standard stays open — forever
The specification (Parts 0–16), the audit instrument, and the anti-pattern taxonomy are public and free, permanently, under CC BY. Conformance marks may be commercial; the method never is. Anyone — including competitors — may implement the standard, run the instrument, and publish results. The spec is the gift; the operation is the business, and the two are kept honestly separate.
C2 · The access tier — a covenanted floor, not a discretionary program
A minimum fraction of active tenants — the covenant ratio, ≥ 10% — is served at cost or free for organizations serving people who could never buy this: nonprofits, schools, community and aid organizations, ministries, and under-resourced regions. Held as substrate, per the standard’s own rules:
- The ratio lives in the provider’s own constitution as
covenant.access_tenant_ratio,source='human', locked — the same sticky lock sold to customers, applied to the seller. - Access tenants are tagged in the substrate; the achieved ratio is computed and surfaced beside the coverage ratios, on the same boards.
- Every re-audit of the provider checks the covenant exactly as it checks coverage: an uncomputed or unmet ratio is a failed pillar — no averaging it away.
- Access tenants receive the full substrate — gates, ledger, roster, standup — never a degraded tier. The multiplication is the point: one governed org template, freely instanced across the organizations that carry the most human weight per dollar.
C3 · Human sovereignty is non-negotiable doctrine
The constitution plane — the five powers, sticky locks, provenance, the human’s permanent precedence over any machine writer — MUST NOT be removed, weakened, or made subordinate to any machine authority in any conforming implementation, at any autonomy tier, for any customer, at any price. There is no enterprise negotiation, no roadmap item, and no future version of this standard in which the machine outranks the human. Conformance verification checks this invariant at every level; a system that fails it fails entirely, whatever else it scores.
C4 · The witness rule
The claims discipline (below) applies to the covenant itself. Stewardship is reported like delivery: ledgered facts with IDs, never sentiment. The access-tier tenants appear in the same standups and coverage boards as paying tenants; their outcomes are verified by the same assertions; and no public claim is made about the covenant that the substrate cannot back on query — including the ratio, which is not cited until it is computed and surfaced.
What to claim — and what never to claim
The covenant is only credible if every public claim maps to a mechanism. This discipline governs the standard, its steward, and any conforming implementation.
Do say (each backed by a named mechanism):
- “An organization-centered multi-agent system with a constitutional governance layer — all coordination through a shared, fully-auditable append-only record.”
- “Separation of powers enforced in code — an agent literally cannot act outside its charter; out-of-charter actions convert into requests.”
- “Every role has a job description and a calendar — full coverage, plan-vs-actual, every day. Silence is detectable per-duty.” (Law 3 — the claim buyers understand instantly.)
- “A self-grading decision ledger — every autonomous decision predicts an effect, is measured against reality, and the system knows its own hit-rate.”
- “Delivery contracts — ‘done’ means a verified outcome row exists; we measure delivery, not activity.”
- “Earned autonomy — granted per task on evidence, revocable on one breach, with regulated actions pinned at approval forever.”
- “Human-overridable control plane — any human edit permanently locks the machine out of that knob; the human steers and is never a bottleneck.”
Never say: “consciousness,” “self-healing,” “life-like agents,” “autonomous self-improvement,” or any claim your latest audit report maps to CANNOT-CLAIM. Anyone who reads the code — or runs the instrument you hand them — will discount everything else. The claims map (Part 9 §9.5) exists so that marketing and reality are the same document.